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CLAIM AMENDMENTS 

Claim Amendment Suminary 
Claims pending 

• At time of the Action: Claims 1-50. 

• After this Response: Claims 6-18 and 30-42. 
Canceled or Withdrawn claims: 1-5, 19-29, and 43-50. 
Amended claims: 6-8, 12-14, 30-32 and 36. 

New claims: none. 

Claims; 

Claims 1-5 are Canceled. 

6. (Presently Amended) The apparatuo in claim 5 u^horoia: 
A pparatus for formin g an identifier for an InplJdLcrfai^JLan^ 
the iQpuj: ol?>}pc;;t jyith^thc identifier so as to yield a marked object, the apparatus 
comprising: 

a proeejiisor! and 

a memory having computer executable instructions stored therein: 
the proceg^or being con figured to perform act Sv_ in response to the stored 
executable instructions, comprising: 

• p;enerating a flow repre sentation for the input jobiect. the representation 
haYijlSL.a _T>I uralitv of nodes, sai djoodes representing pre-defined first 
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Qg^rations performed hy_ ^e_ input obiect and comiections amon^ ihet 
nodes signifyin g associated flow among the pre-de fined first oper ations 
performed bv the input object 

o ran(j[oTnly selecting first and §ecQnd nodes fi"om the plurality of nodes in 
thCLJCepresentation so as to form a_pjccHd.cfincd, number of, nodal pairs^ 
each of said pairs having one of the first nodes and a corresponding one 
Q£.th.e-S.c.co.ndjio.d.c.s.: 

o for each o f the nodal oairs^ fq ^j i;Lg,a n executable procedure associated 
with each of the nodal pairs bv establis hing flow between th ^_fltatiitxd 
second nodes in, said, , ea ch nodal pair and inserting, in the flow so 
ejaabJish&d..._a.^d^^ plurality of different pre-defined second 

operations so as to collectively define the marked object , whereby the 
marked obiect implements the pre-defined first o peiations.-.. and a 
pluralitY„..of .selected ones of the prc-dcfincd second operations, each of 
which has been randomly spliced ynto fjlowpf the input obiect wherein 
the, identifier collectively comprises all ones which differ within the 
plurality of TacgdldGilied second operations, and execution flow 
associated therewith and involving the podalpairs: 

o inserting a pre-defined nnrn ber of separate links and designations for 
selected ones o , f_the procedures into the flow presentation so as to 
yield a qpmbined flow represen tation: and 

o converting, in response to said input executable code and executable 
code for said selected ones of the procedures^ s^ajjdLgQjnbined flow 
representation i nto out put executable code, saf^ out put executable code 
bei ng: the marked code: 
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• the input obtect comprises a software obiect. which comp rises input 
executable code , at least OTie inj;tr uction in the input execut^|ile,cnHe 
b-dng- associated with a corresponding one of the pre-defined first 
operations, and executable code for a corresponding executable 
prpcedure being associated with each selected one of the pre-defmed 
second operations: 

• the input executable code comprises first and second portions thereof 
and the flow representation comprises first and second separate flow 
representations for the first and second p ortions of th e input executable 
cQ<^c^ Te $pectively: 

• the first portion of the input executable code comprises at least a pre- 
defined portion of a non-marked application program; and 

• tlie second portion of the input executable code comprises a remaining 
portion of the non-marked application program or pre-defined 
executable security code. 



?• (Presently Amended) The apparatus in claim 6 wherein the 
processor, in response to the stored instructions, inserts executable code for 4be g 
selected one procedure in noncontiguous locations in the input executable code. 

8- (Presently AMENDED) The apparatus in claim 6 wherein the 
processor* in response to the stored instructions, selects g procedure fi-om a 
pre-defined library of stored routines, wherein said procedure is one of the stored 
routines. 
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9. (Original) The apparatus in claim 8 wherein each of the inserted 
procedures implements, when executed, a pre-defined function such that if any of 
said inserted procedures is removed from the marked code, the marked code, when 
subsequently executed, will terminate its execution. 

10. (Original) The apparatus in claim 8 wherein at least one of the 
inserted procedures implements, when executed, a pre-defined function which is 
independent of functionality provided by the non-marked application program. 

11. (Original) The apparatus in claim 6 wherein the security code 
provides functionality independent of any functionality provided by the 
application program, 

12. (PRESENTLY AMENDED) The apparatus in claim 6 wherein the 
processor, in response to the stored instructions: 

(a) generates first and second separate flow representations for the first 
and second portions of the input executable code; 

(b) partitions each of the first and second flow representations into k 
clusters each so as to yield first and second cluster flow representations, 
respectively (where k is a pre-defined integer); 

(c) randomly selects the first and second nodes in the first and second 
cluster flow representations, respectively, so as to form a corresponding one of the 
nodal pairs; 



Serial No.: 09/525/i94 

Any Docket Na.: M$l.tt89u5 

RESPONSE TO OFFICE ACTION DATED 3/25/2004 



Dttyi KaseyCwGhristia 



PA(X7l17*RCVDAT6l8r20l)44:00:12PM [Eastern Daylight Tline]'SVR:USPTO-^^^^^ 



JUN 08 2004 13:13 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 P. 08/17 



1 
2 
3 

5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 

8 16 
to 

lim 

CM 

20 
21 
22 
23 
24 
25 



(d) inserts a designation for ^ a selected executable procedure at a first 
node in the nodal pair; and 

(e) repeats operations (c) and (d) a pre-defined number of times so as to 
insert a pre-defined number of separate procedures into the first and second flow 
representations so as to yield the combined flow representation. 

13. (Presently Amended) The apparatus in claim 12 wherein the 
processor, in response to the stored instructions, inserts executable code for ^ g 
selected one procedure in noncontiguous locations in the input executable code. 

14. (Presently Amended) The apparatus in claim 12 wherein the 
processor, in response to the stored instructions, selects Ib^ § one procedure fix^m a 
pre-defined library of stored routines* wherein said one procedure is one of the 
stored routines. 

15. (ORIGHNAL) The apparatus in claim 14 wherein each of the inserted 
procedures implements, when executed, a pre-defined function such that if any of 
said inserted procedures is removed &om the marked code, the marked code, when 
subsequently executed, will terminate its execution. 

16. (Original) The apparatus in claim 14 wherein at least one of the 
inserted procedures implements, when executed, a pre-defined function which is 
independent of functionality provided by the non-marked application program. 
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17- (Original) The apparatus in claim 12 wherein the processor, in 
response to the stored instructions: 

randomly selects a node, in the first cluster flow representation; 

randomly selects, with probability I - X (where A- is a pre-defined 
value with 0 <X. <1), a node Y in the second cluster flow representation; 

randomly selects, with probability Xy a node Z, other than U, in the 
first cluster flow representation; and 

provides designations of nodes Y and Z as the nodes forming the 

nodal pair, 

18. (Original) The apparatus in claim 12 wherein the processor, in 
response to the stored instructions, randomly selects the first and second nodes 
from different clusters solely within the first cluster flow representation or fi-om 
different clusters solely within the second cluster flow representation. 

Claims 19-29 are CANCELED. 

30. (PRESENTLY AMENBEID) Th o moth od i n o l a m ^ - JO ^ a^vha^iB^ For use 
with a computer system havinpr ^^^jn-Qcessor and a me mory, the memory having 
computer executable instmctions stored therein, a method for forming an identifier 
for innut executable code and for s ecurely marking the inout executable code with 
the idqn fi'fier so as to yield marked code, the method comprising the steps of: 

generating a flow representation for the in put-Qbiect. the representation 
having. aL plurality of nodes^ said nndes repres enting pre-defined first operations 
performed_bv the input object, an^ co nnections among the nodes sip^r^ifymfr 
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as spciatc4 .jno^ a mong the pr e-defined first operations performed bv the input 
pbiect; 

randoTnlv selecting first and second nodes from the plurality of nodesJp_thc 
representation so as to form a pre-defined mimbfiL-QfjaQdal pairs, each of said pairs 
haying one of the .first podes. and a corresponding one of the second nodes: 

fblLjeadbLJljLthg^ an executable procedure associated 

with each of the nodal pairs bv establish ing flow between the , fir^t , an 4 second 
nodes in said each nodal pair and inserting, in the flow so established, a selected 
one of a plurality of different pre-defined $.e.COJid..QpcratiQns_so_as to collectively 
define.the,niarked„Qb|ic.Qt^„wJbieteb>Lthe rna rk cd object implements the pre-defined 
first operations and a plurality of selected ones of the pre-defined second 
operations, each of which has been randomly spliced into flow Qj^ii.eJnp.utLObiect, 
wherein the identifier collecti vely com prises all o nes which differ within the 
plurality of pre-defined second operations > and execution flow assoidatjsd 
Ihereydtb and involving the nodal pairs: 

inserting a pre-defijied-number of separate links and designa tions for 
^e]ect pd on^s of the procedure s into the fio\ SLJ:^re$eotation_$o as to yield a 
combined flow representation: and 

converting, in response to said input executable code and executable code 
for said selected ones of the procedure s, said combined flow representation into 
output executable code, said out put executable code being the marked code; 

wherein: 

^ the input jj^ect comprises a s_Qfhvare obiect. which comprises input 
executable code, at least one instruction in the input executable code 
being associated with a corresponding one of t^ e pre-defined first 



Serial No.: 09/525.694 
AttyDoekrtNo.: MSl-llS^us 
RESPONSE TO OFFICE ACTION DATED 



attyrKaseyC.crtftBfla 



PA6i1IK17'RCVDATm044:00:12PM [Eastern Daylight Tiinel'SWiUSFTOIFXRF-^ 



JUN 08 2004 13=14 FR LEE - HfiYES PLL 



509 323 8979 TO 17038729306 



P. 11/17 



3 S CO o 

:g ^ ^ 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
II 
12 
13 
14 
15 
16 

E 

817 

tn 



I". -Sis 



I o . 



20 
21 
22 
23 
24 
25 



operations, and executable code for a carrespondiTia executal^jQ 
procedure bqin^ as^Qciatet^ with each selected ntie nf the nre-definf^rl 



• iheJnaut executable 



arst^nd, second, portions, thereof 



and the flow representation comprises first and second separate flow 
rerires.CTtari.QnsJjQt-t he first ai ^d second portions of the input e:^ecutable 
code, respectively: 

• the first portion of the input executable code comprises at least a pre- 
defined portion of a non-marked appUcation program; and 

• the second portion of the input executable code comprises a remaining 
portion of the non-marked application program or pre-defined 
executable security code, 

3L (Presently Amended) The method in claim 30 further 
comprising the step of selecting g procedure from a pre-defined library of 
stored routines, wherein said procedure is one of the stored routines* 

32. (Presently AMENDED) The method in claim 31 further 
comprising the step of inserting executable code for the a selected one procedure 
in noncontiguous locations in the input executable code. 

33. (Original) The method in claim 31 wherein each of the inserted 
procedures implements, when executed, a pre-defined function such that if any of 
said inserted procedures is removed from the marked code, the marked code, when 
subsequently executed, will terminate its execution. 
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34. (Original) The method in claim 31 wherein at least one of the 
inserted procedures implements, when executed, a pre-defined function which is 
independent of functionality provided by the non-marked application program, 

35. (Original) The method in claim 30 wherein the security code 
provides functionality independent of any functionality provided by the 
application program. 

36. (PRESENTLY AMENDED) The method in claim 30 further 
comprising the steps of: 

(a) generating first and second separate flow representations for the first 
and second portions of the input executable code; 

(b) partitioning each of the first and second flow representations into k 
clusters each so as to yield first and second cluster flow representations, 
respectively (where k is a pre-defined integer); 

(c) randomly selecting the first and second nodes in the first and second 
cluster flow representations, respectively, so as to form a corresponding one of the 
nodal pairs; 

(d) inserting a designation for the § selected executable procedure at a 
first node in the nodal pair, and 

(e) repeating operations (c) and (d) a pre-defined number of times so as 
to insert a pro-defincd number of separate procedures into the first and second 
flow representations so as to yield the combined flow representation. 
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37. (Original) The method in claim 36 further comprising the step of 
inserting executabl code for the selected one procedure in noncontiguous 
locations in the input executable code. 

38. (Original) The method in claim 36 further comprising the step of 
selecting the procedure from a pre-defined library of stored routines, wherein said 
procedure is one of the stored routines* 

39. (Original) The method in claim 38 wherein each of the inserted 
procedures implements, when executed, a pre-defined function such that if any of 
said inserted procedures is removed from the marked code, the marked code, when 
subsequently executed, will terminate its execution. 

40. (Original) The method in claim 38 wherein at least one of the 
inserted procedures implements, when executed, a pre-defined function which is 
independent of functionality provided by the non-marked application program. 

41. (Original) The method in claim 36 wherein the first and second 
nodes randomly selecting step comprises: 

randomly selecting a node, U, in the first cluster flow representation; 

randomly selecting, with probability 1 - X (where A. is a pre-defined 
value with 0 <A, <1), a node Y in the second cluster flow representation; 

randomly selecting, with probability X, a node Z, other than U, in the 
first cluster flow representation; and 
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providing designations of nodes Y and Z as the nodes forming the 



nodal pain 



42- (Original) The method in claim 36 wherein the first and second 
nodes randomly selecting step comprises the step of randomly selecting the first 
and second nodes from different clusters solely within the first cluster flow 
representation or from different clusters solely within the second cluster flow 
representation. 

Claims 43-50 are CANCELED. 
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